Known vulnerabilities in Server Applications Module 15-SP5 - page 8

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 183
Public exploits: 15
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP5 Server Applications Module 15-SP5 is affected by 183 vulnerabilities: 1 critical, 10 high, 120 medium, 52 low Critical High Medium Low

Vulnerabilities (183)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80512 - Improper Access Control
CVE-2023-41053		 CWE-284 Low
No
No
 - 06.09.2023 SB2023090669
SB2023090703
SB2023090704
and 8 more
#VU79949 - Incorrect Default Permissions
CVE-2023-32182		 CWE-276 Low
No
No
 - 24.08.2023 SB2023082429
SB2023092250
SB2023092648
and 3 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 - 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU79455 - Permissions, Privileges, and Access Controls
CVE-2023-39418		 CWE-264 Low
No
No
 - 11.08.2023 SB2023081132
SB2023081716
SB2023081720
and 22 more
#VU79454 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39417		 CWE-89 Medium
No
No
 - 11.08.2023 SB2023081132
SB2023081715
SB2023081716
and 60 more
#VU79263 - Exposure of sensitive information to an unauthorized actor
CVE-2023-20569		 CWE-200 Low
No
No
 - 08.08.2023 SB20230808145
SB20230808146
SB2023080902
and 86 more
#VU79262 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2022-40982		 CWE-1342 Medium
No
No
 - 08.08.2023 SB20230808144
SB2023081009
SB2023081143
and 113 more
#VU78948 - Reachable Assertion
CVE-2023-3301		 CWE-617 Medium
No
No
 - 04.08.2023 SB2023080421
SB2023080425
SB20230808136
and 11 more
#VU78946 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-3255		 CWE-835 Medium
No
No
 - 04.08.2023 SB2023080416
SB2023080425
SB20230808136
and 13 more
#VU78844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-37464		 CWE-327 Medium
No
No
 - 01.08.2023 SB2023080146
SB2023080147
SB2023080164
and 14 more
#VU78780 - Permissions, Privileges, and Access Controls
CVE-2023-2861		 CWE-264 Low
No
No
 - 31.07.2023 SB2023073110
SB2023073115
SB2023080425
and 13 more
#VU78694 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-3750		 CWE-362 Medium
No
No
 - 26.07.2023 SB2023072647
SB2023072649
SB2023073149
and 4 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 - 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78506 - Heap-based Buffer Overflow
CVE-2022-24834		 CWE-122 Medium
Public exploit available
No
 - 21.07.2023 SB2023072126
SB2023072127
SB2023072128
and 21 more
#VU77574 - Server-Side Request Forgery (SSRF)
CVE-2023-36661		 CWE-918 Medium
Public exploit available
No
 - 20.06.2023 SB2023062027
SB2023062029
SB2023070446
and 3 more
#VU77499 - Out-of-bounds write
CVE-2023-0330		 CWE-787 Low
No
No
 - 19.06.2023 SB2023061903
SB2023061909
SB2023063036
and 14 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 - 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU72649 - Integer overflow
CVE-2023-25155		 CWE-190 Low
No
No
 - 01.03.2023 SB2023030105
SB2023031014
SB2023031036
and 20 more
#VU72634 - Resource exhaustion
CVE-2022-36021		 CWE-400 Medium
No
No
 - 28.02.2023 SB2023022869
SB2023031014
SB2023031036
and 17 more
#VU69581 - Improper Authentication
CVE-2022-37026		 CWE-287 High
No
No
 - 24.11.2022 SB2022112429
SB2022112431
SB2022112534
and 10 more


Showing elements 141 - 160 out of 183